Snort mailing list archives

Re: MiniDuke sigs?


From: James Lay <jlay () slave-tothe-box net>
Date: Fri, 01 Mar 2013 14:52:50 -0700

On 2013-03-01 14:43, Joel Esler wrote:
On Mar 1, 2013, at 4:05 PM, James Lay <jlay () slave-tothe-box net [2]>
wrote:

svchost.jpg? Really?



http://blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html
[1]

We are working on coverage for this now. Not just what you see in the
screenshot there, since the CNC is already down.

--
JOEL ESLER
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire


Excellent..thanks Joel!

James

------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!


Current thread: